Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b21030e-76b9-3ea9-b998-e2e2e28b5dfe.roa
File:                     6b21030e-76b9-3ea9-b998-e2e2e28b5dfe.roa (raw, json)
Hash identifier:          zSqpCI6cdguoncFcg/Xb7Htpvyu7sRGMf8BgQxBVr7A=
Subject key identifier:   F1:61:28:7F:33:8C:C4:CF:13:77:8A:13:61:86:D0:53:FE:C9:3D:03
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584EA788E3D905F9AF634BE6B220
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b21030e-76b9-3ea9-b998-e2e2e28b5dfe.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22909
IP address blocks:        68.53.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:e3:d9:05:f9:af:63:4b:e6:b2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=8dac4bf3-be9c-4198-854c-9f14b1950052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ee:0d:c3:03:a1:4d:24:73:b0:e1:49:b1:6b:
                    33:fc:65:79:0d:42:af:fb:57:4d:71:7e:90:06:7d:
                    71:27:e0:f2:aa:e2:d5:3a:34:71:c8:1a:73:ba:f9:
                    b5:b6:4b:16:dd:e0:bb:f9:3e:6d:19:12:c2:cb:9e:
                    f0:f0:54:a1:d1:25:02:5a:de:03:86:60:a4:90:dc:
                    39:2f:ff:0a:18:41:e9:eb:48:92:31:cc:69:be:e0:
                    35:26:88:e9:fc:ec:db:d3:23:5e:22:e8:c0:58:ab:
                    79:5b:c0:43:2b:86:b0:ee:8c:d8:a6:ce:4f:da:e3:
                    a6:a8:04:17:ec:24:07:8f:26:39:95:3d:9b:d1:4e:
                    8c:ee:a3:0f:df:22:5d:97:06:bd:2e:96:5a:60:20:
                    d1:87:72:f4:66:ff:f6:4e:00:b8:a8:41:cf:3d:25:
                    c5:f9:72:05:6f:fe:73:6b:83:8c:d6:79:4e:8d:c9:
                    08:10:30:7e:b6:f0:07:62:ea:2a:95:3c:a2:a7:15:
                    27:75:9e:97:46:91:a2:39:93:84:6f:ff:5b:3b:e0:
                    26:c0:7a:bf:de:0b:db:7b:7a:ef:c8:e8:aa:ea:89:
                    fe:fb:30:e3:e3:63:d9:ba:d8:1b:1d:77:a5:bd:6a:
                    c1:f7:96:54:72:33:fc:8b:04:16:7d:c0:b8:82:6a:
                    93:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:61:28:7F:33:8C:C4:CF:13:77:8A:13:61:86:D0:53:FE:C9:3D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b21030e-76b9-3ea9-b998-e2e2e28b5dfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.53.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d2:87:9d:0b:17:fc:9f:35:9c:95:f5:dd:4b:34:0a:b7:2c:
         fb:a2:94:dc:a7:43:9c:63:91:08:e0:2c:c0:af:5c:73:d5:93:
         96:d3:0f:bd:fc:61:78:92:98:d8:e1:ef:6c:e8:9c:6a:76:9e:
         86:53:8d:35:d9:3d:af:45:d2:a1:47:c7:9c:26:d4:e9:a2:66:
         af:1c:a1:79:79:97:79:3b:58:83:1a:70:38:94:c1:15:59:87:
         ec:d4:dc:13:f7:1d:bb:59:06:5a:0f:ca:96:8e:92:42:82:59:
         c3:89:c9:c5:67:b0:0d:50:73:93:09:0e:c7:2b:10:84:2a:14:
         6c:67:0f:9e:03:8b:06:fa:0f:ce:64:e1:31:26:d5:eb:7f:de:
         85:2f:40:c9:c7:56:fb:30:d0:d1:7a:d6:c4:74:e0:96:7a:b3:
         9d:5f:00:54:b9:26:0b:5e:86:e5:50:38:2c:db:c1:da:9c:52:
         77:06:7c:dc:7c:90:cf:54:75:a1:fd:e3:cb:86:be:21:3b:96:
         2b:14:de:d3:09:d1:40:b1:db:c0:55:9f:ef:a7:fd:c1:24:ff:
         10:41:8e:3f:d8:6f:c8:a8:f5:e9:f7:b7:59:28:5b:04:cd:24:
         6a:ff:96:1c:78:40:d1:13:0b:6f:67:35:ac:bd:4c:85:37:3e:
         f9:98:2f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:47 2026 by rpki-client